Work in progress is in branches/tbishop/t11146_fonts. It encapsulates the link in a new file bootstrap_css.jspf, included by v.jsp and ajax_status.jsp.

Complication: is the file base.tag used for anything, or is it dead code? Other than that, changes are ready. As Steven suggested, can get bootstrap.min.css from CDN instead of local file, it’s an update of bootstrap version so we should test more carefully than if we were only replacing http with https. -- CORRECTION: actually it's the same (old) version (3.1.1) of bootstrap.min.css so version change isn't a concern after all.